Data Subject Rights Policy

[Last Revised: January 07 2020]

Search Visions Media Ltd. (“Search Visions” or “we” or “us”) respect the privacy of the users of its websites and partners (“you” or “yours” or “Data Subjects”), and adheres to the provisions of the EU General Data Protection Regulation (“GDPR”) and The California Consumer Privacy Act of 2018 (“CCPA”). To this end, we are providing you with this summary of your rights with regards to your personal data that we process, in the event you are resident of the European Economic Area (“EEA”) or California, respectively.

THE RIGHT TO BE INFORMED

Data Subjects have the right to be provided with information detailing our data collection and privacy practices, for example what types of personal data we collect, purpose of collection, how we process it, etc., all, in order to ensure fair and transparent processing of your personal data. We provide such information in our privacy policy. You have the right to be informed on the categories of Personal Information collected, sold, disclosed by us (if you are a California resident – only in the previous 12 months), therefore we ensure our privacy policy discloses all of the above and is updated every 12 months (under the CCPA). Please see our Privacy Policy available at: https://generativeltd.com/privacy-policy/

ACCESS RIGHT

Data Subjects have a right to request a confirmation from us that we process their personal data. In addition, Data Subjects may request to be provided with a copy of the personal data we process, as well as to understand how and why we use this personal data. The GDPR and CCPA provide different protections, the GDPR enables access to all Personal Data processed by the controller, however the CCPA access right applies only to Personal Information collected in the 12 months prior to the request.

THE RIGHT TO BE FORGOTTEN / THE RIGHT OF DELETION

Data Subject have the right to require us to erase certain personal data, if particular conditions are satisfied: (1) the personal data is no longer needed for the original purpose and there is no new lawful basis for continued processing; (2) you have exercised your right to withdrawn consent (solely if and when consent was the lawful basis for processing), or to object to the processing of personal data, and we have no overriding grounds for the continued processing; (3) the personal data is processed unlawfully; or erasure of personal data is necessary to comply with applicable legislation. You may also require us to request third parties to which we have transferred your personal data, to erase the data as well.

However, the “right to be forgotten” is not absolute. We may reject your request to exercise this right in some circumstances, including where we must retain the data in order to comply with legal obligations; or we must retain the data in order to establish or defend against legal claims, etc., all subject to applicable legislation.

THE RIGHT TO OBJECT TO PROCESSING OF PERSONAL DATA

Data Subject have the right to object to processing of personal data, in the event the basis for processing is our legitimate interests. Notwithstanding the above, we will be permitted to continue the processing if our legitimate interests in this regard override Data Subject rights, interests and freedoms, or when processing is necessary to establish, exercise or defend a legal claim or right, etc., all, subject to applicable legislation.

THE RIGHT TO RESTRICT PROCESSING OF PERSONAL DATA

Data Subject may limit the purposes for which we process its personal data. The right to restrict processing activities may apply when: (1) the accuracy of the data is contested; (2) processing is unlawful and data subject requests restriction instead of erasure; (3) the personal data in no longer needed for the original purpose it was collected, however the data is still required to establish, exercise or defend legal rights; or (4) there are overriding grounds in the context of an erasure request.

DATA RECTIFICATION

Data Subject have the right to require to update personal data which is not correct, as well as to require to inform third parties to which such data was transferred, to correct the data as well.

THE RIGHT TO DATA PORTABILITY

Data Subject have the right to have its personal data sent or “port” to a third-party, however, the GDPR and CCPA apply differently to this right, thus, we will handle this according to the jurisdiction you are subject to.

NONDISCRIMINATION

You must not be discriminated for exercising any of your rights, as charging you with different fees, prices or rate for services or denied it (only under the CCPA).

Notwithstanding the above it is allowed to set up schemes for providing financial incentives and you can opt-in to become part of them.

RESPONSE TIMING AND FORMAT

Under the CCPA your rights only apply to the collected Personal Information of the previous 12 months to the request and you are not entitled to submit more than 2 requests in a 12 months period.

We shall response to your request in any event within 30 days from the receipt of the request subject to GDPR and between 10-45 days from receipt of a request subject to CCPA. If we require more time, we will inform you of the reason and extension period in writing. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If you wish to submit a request to exercise any of your rights, please fill in the User Rights Request form available here.

Or email us at: support@generativeltd.com